ingest-pdf
Warn
Audited by Snyk on May 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The workflow explicitly downloads PDFs from arbitrary URLs using curl ("case "$INPUT" in http*://*") and then extracts and inlines their text into the created note, meaning untrusted third-party PDF content could contain instructions that the agent will read and that could influence downstream behavior.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata